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A general framework for the connection between characteristic formulae and behavioral semantics 
is described in |2J. This approach does not suitably cover semantics defined by nested fixed points, 
such as the «-nested simulation semantics for n greater than 2. In this study we address this deficiency 
and give a description of nested fixed points that extends the approach for single fixed points in an 
intuitive and comprehensive way. 

1 Introduction 

In process theory it has become a standard practice to describe behavioural semantics in terms of equiv- 
alences or preorders. A wealth of such relations has been classified by van Glabbeek in his linear 
time/branching time spectrum H. Branching-time behavioural semantics are often defined as largest 
fixed points of monotonic functions over the complete lattice of binary relations over processes. 

In |T| we give a general framework to reason about how this type of behavioral semantics can be 
characterized by a modal logic equipped with a greatest fixed point operator, or more precisely by char- 
acteristic formulae expressed in such a logic. In that reference we show that a behavioural relation that 
is derived as a greatest fixed point of a function of relations over processes is given by the greatest fixed 
point of the semantic interpretation of a logical declaration that expresses the function in a formal sense 
that is defined in present paper. Roughly speaking if a logical declaration describes a monotonic func- 
tion over a complete lattice then its fixed point describes exactly the fixed point of the function. In IH 
preorders and equivalences such as simulation preorder and bisimulation equivalence are characterized 
following this approach in a simple and constructive way. However, when the definition of a behavioural 
relation involves nested fixed points, i. e. when the monotonic function that defines the relation takes an- 
other fixed point as an argument, things get more complicated. The framework offered in [2J only deals 
with nesting on two levels and in a rather clumsy and unintuitive way. Furthermore it does not extend 
naturally to deeper nesting, like for the n-nested simulations for n > 2. In this study we address this 
deficiency and define a logical framework in which relations obtained as a chain of nested fixed points 
of monotonic functions can be characterized following general principles. This extends the approach for 
single fixed points in an intuitive and comprehensive way. 

As the applications we present in the paper only deal with nesting of greatest fixed points, this study 
only focuses on greatest fixed points. However it is straightforward to extend it to deal with alternating 
nesting of both least and greatest fixed points. We also believe that our approach gives some idea about 
how fixed point theories in different domains can be compared in a structured way. 
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The remainder of the paper is organized as follows. Section 2 presents some background on fixed 
points of monotone functions. Section 3 briefly introduces the model of labelled transition systems and 
some results on behavioural relations defined as greatest fixed points of monotonic functions over binary 
relations. The logic we shall use to define characteristic formulae in a uniform fashion is discussed in 
Section 4. The key notion of a declaration expressing a monotone function is also given in that section. 
Section 5 is devoted to an application of our framework to the logical characterization of the family of 
nested simulation semantics. 

2 Posets, monotone functions and fixed points 

In this section we introduce some basic concepts we need in the paper. 
Definition 2.1 

• A partially ordered set, or poset, (A , ) ( usually referred to simply as A) consists of a set A and a 
partial order over it. 

• If A is a poset and MCA, then a £Ais an upper bound /or M ifm Qa a for all m ^ M. a is a least 
upper bound (lub)forM if it is an upper bound for M and if whenever b is an upper bound for M 
then a b. 

• A poset A is a complete lattice if the lubfor M exists for all MCA. 

• For posets A and B, a function :A^Bis monotone if it is order preserving; it is an isomorphism 
if it is bijective and both (j) and its inverse are monotone. We let A -^mono ^ denote the set of 
monotone functions from A to B. 

• If A is a poset and f (zA -^mono A, then x ^A is a fixed point of f if f{x) = x. We write vf (or 
Vx.f{x)) for the greatest fixed point of f if it exists. 

• If A and B are posets, f & A -^mono A and ^ £ A -^mom B is an isomorphism then we define 
^*f\B^Bas^*f = ^ofo^-\ 

Note that the lub of a subset of a poset A is unique if it exists and the same holds for greatest fixed points 
of monotone functions over posets. It is well known, that if A and B are posets/complete lattices and / is 
some set, then the Cartesian product A x B and the function space / A are a posets/complete lattices 
under the pointwise ordering. The following theorem is due to Tarski. 

Theorem 2.2 ( IIIOI ) If A is a complete lattice and f £ A -^mono A, then f has a unique greatest fixed 
point 

The theorem below is proved in 121 and is the key to the general theory we present in this paper. 

Theorem 2.3 Let A and B be posets, f &A -^mono A and :A^B be an isomorphism. Then vf exists 
iffv{<p*f) exists. If these fixed points exist then <p{vf) = v{<p*f). 

3 Labelled transition systems and behavioural relations 

It has become standard practice to describe behavioural semantics of processes by means of a labelled 
transition system as defined below. 

Definition 3.1 (Q) A labelled transition system (LTS) is a triple P = (P, A, where 

• A. is a finite set (of actions). 
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• P is a finite set (of processes), and 

• — >-CPxAxP/5'fl; transition relation. 

As usual, we write p — ^ p' for {p,a,p') €— Throughout this paper we assume that the set A is fixed. 

As LTSs are in general to concrete, processes are compared by preorders or equivalences. These are 
often obtained as the greatest fixed points to monotone endof unctions on the complete lattice ^(P x P). 
We will show some example of such functions but first we state and prove some properties. 

Definition 3.2 //^ G ^(P x P) ^,„o„o ^{P xF) and A e ^{P x P), we define 

• ^ {,^{S-^))-\ and 

• ^nA:5h^ J^(5)nA. 

The following lemma will be applied below. 

Lemma 3.3 Let ^ e S^{Vx P) ^mono ^{P xP) and A e ^(P x P). Then 
. #,^nA G ^(P X P) ^„,ono ^{P X P), 

• v# = {v^y^ and 

• ^frA = .0T)A-\ 

Proof The first two statements are proved in 0. To prove the third one we proceed follows: 

{^fnA){s) = ((^nA)(5-'))-i = nA-1 = (#nA-i)(5). 

We will complete this section by giving some examples of endofunction that define some standard be- 
havioural preorders and equivalences Eljl]. 

Definition 3.4 Lef ^ : ^(P x P) ^ ^(P x P) be defined as follows: 

{p,q) G ^{S) iff Ma eA,p' £ P.p ^ p' ^ 3q' eP .q ^ q A {p',q') G S. 

It is easy to check that ^ is monotonic and therefore it has a greatest fixed point. 
Definition 3.5 We define: 

• ^sim = cind Qsim= V-^sim (simulation preorder), 

• '^opsim = =^ ond Qopsim= V'^opsim (inverse simulation preorder), 

• ^sim=Qsim H ^opsim (simulation equivalence) and 

• '^bisim = '^sim^'^opsim and ^hisim= V-^bisim (bisimulation equivalence). 

4 Equational modal v-calculi with nested fixed-points 

In this section we introduce variants of the standard equational modal /i -calculus HI. Like in 191 these 
variants only allow for nested fixed points, i. e. where the logical languages form a hierarchy where fixed 
points in a language on one level are allowed as constants in the logic on the level above. Our approach, 
however, differs from the original one in the sense that the fixed-point operator is explicit in the syntax 
and can therefore be used in logical expressions. In this study we only focus on greatest fixed points 
(which explains the title of this section) but the framework can easily be extended to involve nesting 
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of both greatest and least fixed points. The logical languages we introduce depend on the implicitly 
assumed fixed finite set A. 

Our basic logic ^ is the standard Hennessy-Milner Logic (HML) without variables. This logic 
is generated by £ = (So,Ei,Z2) where Zq = {tt,ff} are the constants or the operators of arity 0, Zi = 
{(a), [a],<3 G A} are the operators of arity 1, and E2 = {A, V} are the operators of arity 2. 

The formulae in ^ are interpreted over an LTS (P, A, as the set of elements from P that satisfy 
them. Satisfaction is determined by a semantic function that is defined below. For M C P we let {■a-)M = 
{p G P I 3^ G M.p q}, and [■a-]M = {■a-)M where M is the complement of the set M. 
Definition 4.1 The semantic function ^\ ]] is defined as follows: 

1. ^w=p,^[[//]]=0, 

2. ^[[Fi A F2I = ^[[Fi]] n ^[[F2l , ^[[F, V F2]] = ^Wi^ U ^[[^i]], 

3. ^l{a)F]\ = {■a-)^[[Fl JKMH = [a^^Wl 

The logic Y is the standard Hennessy-Milner logic with variables that was introduced in f9l. It assumes 
a finite index set / and an /-indexed set of variables ^ . In what remains of this paper we assume a fixed 
pair of such / and , unless stated otherwise. 

As the elements of Y typically contain variables, they have to be interpreted with respect to a variable 
interpretation o G ^(P)^ that associates to each / G / the set of processes in P that are assumed to satisfy 
the variable X;. The semantic function Y\ ]] in this case takes a formula F and a a G ^(P)^ and delivers 
an element of ^(P). 

Definition 4.2 The semantic function ^[[ ]] is defined as follows: 

1. n[no=^iF\ifF ^Zo, 

2. r[[X,-]]a = a(/), JG/, 

3. r [[f 1 A F2]] a = r [[Fi ]] a n r [[F2]] a , r [[Fi V F2]] a = r [[Fi ]] a U r [[F2]] a, 

4. r[[(a)F]]a = (•a-)r[[F]]a, nW\o = [-^-l^ [[F]]a. 

In ||9l the meaning of the variables in the logic "Y is defined by means of a declaration, or a function 
D . I ^ Y. Intuitively the syntactic function generates a monotonic endof unction over ^(P)^ 

defined by (1^ [[£>]])(/) = t'[[D(j)]] for all / G /. By Theorem [HI r [[D]] has a unique largest fixed point 
V'^[[D]] G ,^(P)' that can be used to give the semantics for the variables and the formulae that contain 
those in the logic Y. We can then use this to extend the logic ^ with {vD{i)\i G /} as constants 
interpreted as {v1^[[D]](/)[/ G /}. By this we get a logic that is generated by £' = (Iq U {vD{i)\i G 
/},£2i^3)- Then this procedure can be repeated for another declaration that possibly depends on vD as 
a constant and with as the basic logic. The following example shows how this construction works. 

Example Let / = {!}, ^ = {Xi} and A = {a,b} and let the property "invariantly {a)tt" be defined 
as the greatest fixed point corresponding to the declaration Do defined as Do(l) = {a)tt A [a]X\ A [b\X\. 
To interpret this we define ^ = and 'fQ = 'f' where ^ and Y have the meaning described above. 
The derived semantic function l^jDo]] : ^(P)^'} — )• is easily shown to be monotonic and has 

the greatest fixed point v1^[[Do]] G ^(P)^^\ Now we define ^1 as the extension of ^0 that is gener- 
ated by 1} = vDo(l)},ri,r2), i-e. has vDo(l) as a constant that is interpreted as v>o[[Do]](l), 
i.e.^i[[vDo(l)]]=vro[[Do]](l). 

Next let us assume that we have the declaration D\ : {\} ^ Yi where ^1 is the variable logic gener- 
ated by ({ff,^,vDo(l),Xi},r2,S3) andDi is defined asDi(l) = (Zj)vDo(I) A . As before the dec- 
laration is interpreted over ^5^(P)^'^ but using [[ ]] to interpret the constant vDo(l). Again Di is inter- 
preted by using i^i [[ ]] which leads to a monotonic endofunction [[Di]] over ^(P)^^J^ with a fixed point 
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vripi]]. The logic ^2 is now defined as tlie one generated by I? = {{ttJf,vDi{\),vD2{l)},'L2,'^3) 
where ^o[[ ]] and ^1 [[ ]] are used to define the meaning of vDi (1) and vD2(l) respectively. 

We will now generalize this procedure and define our hierarchy of nested fixed point logics, derived 
from a sequence of nested declarations Dj,j = 1,2, .. . ,A'^, i.e. where for each n < N, D„+i is allowed to 
depend on the constants tt,ff and vDj{i) for j <n and / € /. In the definition we assume a finite index 
set / and an /-indexed variable set We use the notation ^(Eq) for the logic generated by (Eq, Ti , £2) 
and ^/(ro) for the logic generated by (Zq U Zi , £2)- 

Definition 4.3 

• Define 

- i:j] = {ff,//}, 

- ^0 = ^(^o) and 

• For n> I, ifDn '.I^i^n, define 

- r;]+^=r;su{vD„(/)|/G7}, 

- =^(£[5+') and 

To define the semantic functions associated with these logics we need the following lemma. 

Lemma 4.4 Assume that ^ = ^{C) and 'f = '^i{C)for some set of constants C where ^[[c]] is well 
defined for all c GC. Then for all D : I ^ Y, the derived semantic function ^[[D]] defined by 

V/G/.(r[[D]]a)(/) = r[[D(/)]]a 

is in ^(P)' ^mono ^(Py and hence, by Theorem\2j\ [[D]] e ^{P)' exists. 

Now we are ready to define the semantic functions for ^„ and for all n>0. 
Definition 4.5 

• ^0 = ^ and ^0 = ^ as defined in Definition \4. 1 1 and \4. 21 respectively. 

• For n>0 the semantic functions for ^„+i is defined as follows: 

1. ^n+i[m=j^n[mifFezi 

2. ^n+l [[{vDn)m = V%lDn]]ii)for i G /, 

3. ^n+l [[Fl A F2]] = [[Fi]] n ^n+l [[F2\] , [[Fl V F2]] = ^n+l [[Fl} U [[F2]], 

4. ^„+i[[(a)F]] = {■a-)^,+i[[Fl^„+y[[[a]F]] = [■a-]^,+y[[F]]. 

• For n>0 the semantic function for 'fn+i i^ defined as follows: 

1. %+4F]]o = -^n+mifF&K' 

2. yn+i[ma = a{i),iGl, 

3. %+i [[Fy AF2]]a = tr+i [[Fi]]on \F2\0 , Wi VF2]]a = WiioU Wiio, 

4. r„+,[[{a)F]]a = (•a-)r„+i[[F]]a, %+iMF]]o = [•a-]r„+i [[F]]a. 
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4.1 Characteristic Formulae by means of Declarations 

The aim of this section is to show how each process € P can be characterized up to a binary relation 
ixi over processes (such as an equivalence or a preorder) by a single formula, the so called characteristic 
formula for p up to co. 

To achieve this, we take / = P in the definitions in the previous section. A declaration D for a variable 
logic y assigns exactly one formula D{p) from Y to each process p ^P. We have seen that each such 
function induces an endofunction y[[D]] £ ^(P)^ -^mono ^(P)^ and therefore y^D^^ exists. This leads 
to the following definition: 

Definition 4.6 A declaration Dfor the logic Y characterizes ixiC P x P ijffor each p,q ^P, 

{p,q) GM ijfq£{vnm){p)- 

In what follows, we will describe how we can devise a characterizing declaration for a relation that is 
obtained as a fixed point, or a sequence of nested fixed points of monotone endofunctions, which can be 
expressed in the logic. In order to define this precisely we use the notation introduced in Definition 14.71 
below. 

Definition 4.7 IfS C P x P we define the variable interpretation Os G ^(P)^ associated to S by 

<ys{p) = k e P e 5}, for each peP. 

Thus Gs assigns to p all those processes q that are related to it via S. 

Definition 4.8 A declaration Dfor Y expresses a monotone endofunction ^ on ^{P xP) when 

{p,q) G ^{S) iffq G r[[D(p)]]a5 = (r [[Dla^)^), 

for every relation 5 C P x P and every p,<7 G P. 

We need the following to prove our main result. 

Definition 4.9 Let^\ ^{P xP) ^ ^{Pf be defined by 0(5) = Gs. 

Lemma 4.10 

• O : =^(P X P) ^ ^(P)!" is an isomorphism. 

• //Ai,A2 G ^(P X P) and ^1,^2 G ^(P x P) ^mono ^(P x P) then 

- <I>(AinA2) = <I>(Ai)n<I>(A2), 

- <I>*(^inAi)=<I>*(^i)n<I>(Ai)a«J 

- <i>*(^in^2) = <^>*(^l)n<^>*(^2)■ 
Proof The first part is proved in 121 whereas the second part follows directly from the definition of <I>. 
Corollary 4.11 Assume that DgP^Y and^ £ ^(P x P) ^mono =^(P x P). Then 

D expresses ^ iff^*{3^) = YlD} ijf D characterizes v^. 

5 Applications 

Following the approach in we define declarations D and D that express the functions and that 
were defined in Section [3l 
Definition 5.1 Let 

• LetD: p^ A^gA Ap/ep.p^p/(«)^p' and 
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From IJl we have: 
Lemma 5.2 

• D expresses ^ and characterizes v^, and 

• D expresses ^ and characterizes v^. 

Now we recall from lH the declarations that characterize simulation equivalence and bisimulation equiv- 
alence. 

Definition 5.3 Define Dbhim = -D^™ A Dopsim and Dsimeq 

Lemma 5.4 Dhisim characterizes ^bisim and Dgimeq characterizes ^sim- 

Proof Dhisim does not contain nested fixed points and can therefore be interpreted directly over '% = 'y. 
Now we proceed as follows: 

To interpret Dsi,„eq we define Ii = {a,^} U {vDsim{p) \p € P} and £2 = U {vDopsim{p) \p € P} and let 
we get 



^0,^1 , and %, be defined as before. Then Dsimeq : P ^> '^i . If we let ^simeq = V'^sim n v,^opsim 



The result now follows from Cor. 14. 1 1 1 

Next we define the nested simulation preorders introduced in f5l by using the function ^ . These 
definition involve nesting of fixed points and are defined recursively on the depth of the nesting. The 
1 -nested simulation ^(\)sim is just the simulation preorder Cv,„, as defined in Section [3] and the function 
^[\)sim is therefore the function ^ . As the preorder E(M+i)i!m depends on the inverse of the preorder 
E(n).v!m» which we call Q[n)opsim^ wc simultaneously define the nested simulations and their inverse in 
our recursive definition. The functions that define E(„).v;m and E(«)o/Av;m are called ■^[n)sim and ■^(n)opsim 
respectively. 



Definition 5.5 (Nested simulations) 

1- ■^(\)sim = ^ and l=(i),™= V^(\)sim, 

^- (l)opsim ^ and !=(l)op.s;ni ^'^(l)opsim' 

^- =^(n+l).vim '^{l)sim ^ ^ (n)opsim and !^(n+l)i7'm ^ {n+\)sim- 

^- (n+\)opsim '^(\)opsim ^ ^ (n)sim and '^(n+\)opsim ^ (n-\-\)opsim- 

We complete this note by defining a sequence of nested declarations and prove that they characterize the 
sequence of «-nested simulation preorders. 

Theorem 5.6 

1- D{\)sim=D expresses '^[\)sim and characterizes 

2. D i^Y)opsim = D ^W^^^^^^ '^{i)opsim and characterizes Q(i)opsim' 

-D(n+i).v™ =-D(i)iim A vD(„)op,,„, expresses ^^n+\)sim and characterizes Q{n+\)sim, 
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4- 0(„+i)op.v™ =-D(i)op.™AvD(„),;„ expresses ^(n+\)op.nm and characterizes 

Proof We prove the statements simultaneously by induction on n. First we note that Di ,D2, . . . , where 
D2i-2 = Df^j-^sim D2,-i = DQ-jgpsj,„ for / > 1 is a sequence of nested declarations. For the case n = 1 we 
get from LemmalUthat <I>*(^(i),i„) = ro[[D(i),;,„]] and ^* i^^i)opsim) = '^i P(i)op.™]]- Next assume 
that <I>*(=^(„),™) = f2n-2[[D^n),im]] and ^*{^in)op.mn) = '^2«-i [P(„)op™n]]- To provc 3. we proceed as 
follows: 

^n-2[P(l)i,-m A VD(„)opim]] = [[^(n+l)™n]] • 

Finally, to prove 4. we have: 

^*{'^{n+r)opsim)=^*{'^{l)opsem)ri^{V^^„),i,n) = P(l)op.vim]] H VTi^-i [[D(„),;,„]] = 
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